$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5cf198cc-9135-342f-8d0b-2253ba576eac.roa File: 5cf198cc-9135-342f-8d0b-2253ba576eac.roa (raw, json) Hash identifier: B223G+XTKYHiZ3Vipf2eZt/iLlAr5bjTWqkE8VRtXJ4= Subject key identifier: DD:87:BB:8F:9C:E1:BF:35:94:98:F1:D7:F7:D8:5F:68:56:9F:05:F9 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584ADA9BCDD1D7F5E52A6BD8E2E0 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5cf198cc-9135-342f-8d0b-2253ba576eac.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 36692 IP address blocks: 163.129.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:cd:d1:d7:f5:e5:2a:6b:d8:e2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=63225b7d-502e-46d4-b87e-3d2a8741b858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:80:dd:73:cc:ea:71:ff:ed:ff:c8:1b:f1: 8a:f9:44:8e:97:22:d4:05:01:1f:25:ce:93:73:e4: b3:cb:cc:40:f7:2e:11:13:fd:15:dc:bd:8c:bb:e9: 9e:1b:b0:1c:5d:14:67:19:43:be:bb:07:c4:23:fe: 87:a6:a0:f9:b7:8d:fd:90:2d:89:bf:0c:a2:02:27: a7:87:e5:73:22:98:44:08:ef:ef:26:7c:fd:a6:6b: 95:8d:7c:07:25:ca:c1:6e:9b:26:cb:20:11:27:9a: 5e:6a:3d:55:5c:68:af:1d:e8:d9:9a:93:ff:69:1e: 36:d4:a9:75:f1:ae:b2:4e:3d:5e:25:79:7b:59:3c: 33:18:d9:60:25:ac:6b:e6:e7:c6:ed:16:ef:57:43: 81:0c:f1:af:75:73:e5:ff:3d:ee:6e:56:4a:af:f5: 75:6f:16:86:44:b5:d6:87:ca:4d:1d:7c:7e:3e:04: 33:cb:13:b3:db:5e:f2:8c:dd:4d:01:a2:00:4d:d9: 25:6f:c2:c8:97:30:5b:7e:32:a0:5e:54:8b:63:94: d8:44:a4:28:70:4c:f8:ae:c2:55:71:16:aa:2e:35: c1:d5:8c:de:fa:0e:b7:a0:a0:c1:07:d2:d3:60:44: 57:7b:33:b2:1f:fc:38:b7:c9:f4:35:8a:b2:34:d2: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:87:BB:8F:9C:E1:BF:35:94:98:F1:D7:F7:D8:5F:68:56:9F:05:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5cf198cc-9135-342f-8d0b-2253ba576eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:36:43:6a:23:31:7b:c7:00:1e:91:08:7a:dd:11:84:99:ee: 7f:87:77:64:a6:95:7d:c4:59:d2:c8:1b:f3:bb:38:64:40:3c: 4a:e7:11:21:37:e5:cb:4f:f9:18:11:63:3a:f2:54:1d:66:8c: 5a:93:1e:1c:3a:a0:5e:19:f6:91:76:76:49:df:ab:f5:f4:74: df:f2:5e:6a:05:e4:be:6c:82:17:03:e8:b2:3f:f8:16:ba:f2: 2c:77:0f:00:14:4c:28:04:7b:9a:8a:ad:81:d0:d3:b7:52:b2: 3d:48:ca:71:19:30:96:9c:86:6a:35:8a:80:4f:0c:8c:b1:18: 86:2c:3f:14:ab:b9:6e:b3:82:a5:2c:85:8d:7e:e2:71:2b:ed: 85:6b:59:62:07:fb:3e:a9:15:35:f8:e9:b3:4a:9b:73:4a:c7: 62:e8:ae:cf:52:09:22:f3:bf:f0:3c:24:45:00:b6:64:e9:93: 2c:9e:7e:74:94:6a:2e:f9:0c:f3:60:e6:ff:bd:58:c1:e6:97: db:03:ab:d3:2f:25:f7:cb:61:7c:cd:88:08:f9:52:3e:af:5a: 0c:76:ed:d7:47:e6:3a:8c:d3:94:c9:fe:7c:82:90:3c:01:40: b7:b0:c4:7d:5f:8d:6a:f9:99:61:70:37:e7:99:81:7f:f1:31: c5:fd:e0:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram83R1/XlKmvY4uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NjMyMjViN2QtNTAyZS00NmQ0LWI4N2UtM2QyYTg3NDFiODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlKA3XPM6nH/7f/IG/GK+USOlyLUBQEfJc6T c+Szy8xA9y4RE/0V3L2Mu+meG7AcXRRnGUO+uwfEI/6HpqD5t439kC2JvwyiAien h+VzIphECO/vJnz9pmuVjXwHJcrBbpsmyyARJ5peaj1VXGivHejZmpP/aR421Kl1 8a6yTj1eJXl7WTwzGNlgJaxr5ufG7RbvV0OBDPGvdXPl/z3ublZKr/V1bxaGRLXW h8pNHXx+PgQzyxOz217yjN1NAaIATdklb8LIlzBbfjKgXlSLY5TYRKQocEz4rsJV cRaqLjXB1Yze+g63oKDBB9LTYERXezOyH/w4t8n0NYqyNNIAzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2Hu4+c4b81lJjx1/fYX2hWnwX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNWNmMTk4Y2MtOTEzNS0z NDJmLThkMGItMjI1M2JhNTc2ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEo4GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANY2Q2ojMXvHAB6RCHrdEYSZ7n+Hd2SmlX3EWdLIG/O7OGRAPErnESE3 5ctP+RgRYzryVB1mjFqTHhw6oF4Z9pF2dknfq/X0dN/yXmoF5L5sghcD6LI/+Ba6 8ix3DwAUTCgEe5qKrYHQ07dSsj1IynEZMJachmo1ioBPDIyxGIYsPxSruW6zgqUs hY1+4nEr7YVrWWIH+z6pFTX46bNKm3NKx2Lors9SCSLzv/A8JEUAtmTpkyyefnSU ai75DPNg5v+9WMHml9sDq9MvJffLYXzNiAj5Uj6vWgx27ddH5jqM05TJ/nyCkDwB QLewxH1fjWr5mWFwN+eZgX/xMcX94Gw= -----END CERTIFICATE-----Generated at Sat Aug 23 06:56:52 2025 by rpki-client